Fix API call for password reset

Since the API changed slightly, I just updated how the frontend was calling the password reset API.

• Send token as a URL param instead of a header
• Send password as a key/value pair in the body instead of a form